403Webshell
Server IP : 43.241.58.20  /  Your IP : 216.73.216.25
Web Server : Apache/2
System : Linux ns1-1556229.dragonhispeed.com 3.16.0 #1 SMP Fri Mar 29 22:50:14 MSK 2024 x86_64
User : ratsitne ( 1130)
PHP Version : 5.6.40
Disable Function : exec,system,passthru,shell_exec,proc_close,proc_open,dl,popen,show_source,posix_kill,posix_mkfifo,posix_getpwuid,posix_setpgid,posix_setsid,posix_setuid,posix_setgid,posix_seteuid,posix_setegid,posix_uname
MySQL : ON  |  cURL : ON  |  WGET : OFF  |  Perl : OFF  |  Python : OFF  |  Sudo : OFF  |  Pkexec : OFF
Directory :  /home/ratsitne/.trash/files/admin/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /home/ratsitne/.trash/files/admin/product-edit.php
<?php
    include '../config.php';
    include 'auth.php';
    $page_title = 'แก้ไขสินค้า';
    ob_start();

    $id = $_GET['id'];
    $result = mysqli_query($conn, "SELECT * FROM products WHERE id = $id");
    $product = mysqli_fetch_assoc($result);

    if ($_SERVER['REQUEST_METHOD'] == 'POST') {
        $sku = $_POST['sku'];
        $name = $_POST['name'];
        $description = $_POST['description'];
        $purchase_price = $_POST['purchase_price'];
        $sale_price = $_POST['sale_price'];
        $unit = $_POST['unit'];
        $barcode = $_POST['barcode'];
        $stock = $_POST['stock'];
        $product_type = $_POST['product_type'];
        $category_id = $_POST['category_id'];
        $updated_at = date('Y-m-d H:i:s');

        // Handle image upload
        $image = $product['image'];
        if (isset($_FILES['image']) && $_FILES['image']['error'] == 0) {
            $target_dir = "../uploads/images/";
            $file_extension = pathinfo($_FILES["image"]["name"], PATHINFO_EXTENSION);
            $unique_file_name = date('YmdHis') . rand(1000, 9999) . '.' . $file_extension;
            $target_file = $target_dir . $unique_file_name;
            if (move_uploaded_file($_FILES["image"]["tmp_name"], $target_file)) {
                // Remove old image
                if ($image && file_exists($target_dir . $image)) {
                    unlink($target_dir . $image);
                }
                $image = $unique_file_name;
            }
        }

        $query = "UPDATE products SET 
                  sku = '$sku', 
                  name = '$name', 
                  description = '$description', 
                  purchase_price = '$purchase_price', 
                  sale_price = '$sale_price', 
                  unit = '$unit', 
                  barcode = '$barcode', 
                  stock = '$stock', 
                  product_type = '$product_type', 
                  category_id = '$category_id', 
                  image = '$image', 
                  updated_at = '$updated_at' 
                  WHERE id = $id";
        if (mysqli_query($conn, $query)) {
            $_SESSION['success_message'] = 'ปรับปรุงข้อมูลสินค้าเรียบร้อยแล้ว';
        } else {
            $_SESSION['error_message'] = 'เกิดข้อผิดพลาด: ' . mysqli_error($conn);
        }
        header('Location: ' . $admin_url . '/product-list.php');
        exit;
    }
?>
<form method="POST" enctype="multipart/form-data">
    <div class="card">
        <div class="card-header">
            <h3 class="card-title"><?php echo $product['name']; ?></h3>
        </div>
        <div class="card-body">
            <?php if (isset($_SESSION['error_message'])): ?>
                <div class="alert alert-danger alert-dismissible fade show">
                    <button type="button" class="btn-close" data-bs-dismiss="alert" aria-label="Close"></button>
                    <i class="bi bi-exclamation-triangle me-1"></i>
                    <?php echo $_SESSION['error_message']; unset($_SESSION['error_message']); ?>
                </div>
            <?php endif; ?>
            <?php if (isset($_SESSION['success_message'])): ?>
                <div class="alert alert-success alert-dismissible fade show">
                    <button type="button" class="btn-close" data-bs-dismiss="alert" aria-label="Close"></button>
                    <i class="bi bi-check-circle me-1"></i>
                    <?php echo $_SESSION['success_message']; unset($_SESSION['success_message']); ?>
                </div>
            <?php endif; ?>

            <div class="row">
                <div class="col-md-6">
                    <div class="form-group">
                        <label for="sku">รหัสสินค้า/SKU</label>
                        <input type="text" name="sku" id="sku" class="form-control" value="<?php echo $product['sku']; ?>" required>
                    </div>
                </div>
                <div class="col-md-6">
                    <div class="form-group">
                        <label for="name">ชื่อสินค้า</label>
                        <input type="text" name="name" id="name" class="form-control" value="<?php echo $product['name']; ?>" required>
                    </div>
                </div>
            </div>
            
            <div class="row">
                <div class="col-md-4">
                    <div class="form-group">
                        <label for="purchase_price">ราคาซื้อ</label>
                        <input type="number" step="0.01" name="purchase_price" id="purchase_price" class="form-control" value="<?php echo $product['purchase_price']; ?>" required>
                    </div>
                </div>
                <div class="col-md-4">
                    <div class="form-group">
                        <label for="sale_price">ราคาขาย</label>
                        <input type="number" step="0.01" name="sale_price" id="sale_price" class="form-control" value="<?php echo $product['sale_price']; ?>" required>
                    </div>
                </div>
                <div class="col-md-4">
                    <div class="form-group">
                        <label for="unit">หน่วย</label>
                        <input type="text" name="unit" id="unit" class="form-control" value="<?php echo $product['unit']; ?>" required>
                    </div>
                </div>
            </div>
            
            <div class="row">
                <div class="col-md-4">
                    <div class="form-group">
                        <label for="barcode">บาร์โค้ด</label>
                        <input type="text" name="barcode" id="barcode" class="form-control" value="<?php echo $product['barcode']; ?>">
                    </div>
                </div>
                <div class="col-md-4">
                    <div class="form-group">
                        <label for="stock">จำนวนคงเหลือ</label>
                        <input type="number" name="stock" id="stock" class="form-control" value="<?php echo $product['stock']; ?>" required>
                    </div>
                </div>
                <div class="col-md-4">
                    <div class="form-group">
                        <label for="product_type">ประเภทสินค้า</label>
                        <select name="product_type" id="product_type" class="form-select" required>
                            <option value="สินค้านับสต๊อก" <?php echo $product['product_type'] == 'สินค้านับสต๊อก' ? 'selected' : ''; ?>>สินค้านับสต๊อก</option>
                            <option value="สินค้าไม่นับสต๊อก" <?php echo $product['product_type'] == 'สินค้าไม่นับสต๊อก' ? 'selected' : ''; ?>>สินค้าไม่นับสต๊อก</option>
                            <option value="สินค้าบริการ" <?php echo $product['product_type'] == 'สินค้าบริการ' ? 'selected' : ''; ?>>สินค้าบริการ</option>
                        </select>
                    </div>
                </div>
            </div>

            <div class="row">
                <div class="col-md-6">
                    <div class="form-group">
                        <label for="category_id">หมวดหมู่</label>
                        <select name="category_id" id="category_id" class="form-select" required>
                            <?php
                                $result = mysqli_query($conn, "SELECT id, category_name FROM categories");
                            ?>
                            <?php while ($row = mysqli_fetch_assoc($result)): ?>
                            <?php $selected = $row['id'] == $product['category_id'] ? 'selected' : ''; ?>
                                <option value="<?php echo $row['id']; ?>"<?php echo $selected; ?>><?php echo $row['category_name']; ?></option>
                            <?php endwhile; ?>
                        </select>
                    </div>
                </div>
                <div class="col-md-6">
                    <div class="form-group">
                        <label for="image">รูปภาพสินค้า</label>
                        <input type="file" name="image" id="image" class="form-control">
                        <?php if ($product['image']): ?>
                            <img src="<?php echo $base_url . '/uploads/images/' . $product['image']; ?>" alt="Product Image" class="img-thumbnail mt-2" width="150">
                        <?php endif; ?>
                    </div>
                </div>
            </div>

            <div class="form-group">
                <label for="description">รายละเอียดสินค้า</label>
                <textarea name="description" id="description" class="form-control" rows="5"><?php echo $product['description']; ?></textarea>
            </div>        
        </div>
        <div class="card-footer">
            <button type="submit" class="btn btn-primary"><i class="bi bi-floppy me-1"></i>บันทึกข้อมูล</button>
            <a href="<?php echo $admin_url . '/product-list.php'; ?>" class='btn btn-secondary'>ย้อนกลับ</a>
        </div>
    </div>
</form>
<?php
    $content = ob_get_clean();
    $js_script = '';
    include 'template_master.php';
?>

Youez - 2016 - github.com/yon3zu
LinuXploit